Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/34352e3136342e3132382e302f32332d3233203d3e20323638363136.roa
File:                     34352e3136342e3132382e302f32332d3233203d3e20323638363136.roa (raw, json)
Hash identifier:          NdjckXWMTuLoHVKXD5WiimSKnEM5zXvilYKUscVqe58=
Subject key identifier:   B5:E1:F5:4A:EC:55:C1:6A:D6:B8:59:8D:93:88:8B:BD:1B:EF:BF:6E
Certificate issuer:       /CN=7FB36BC72BD2ACF8CC6BD5B54BDF564E36834B9B
Certificate serial:       672E88A7481EF5F9FD9FFFC40AB9B480551C4012
Authority key identifier: 7F:B3:6B:C7:2B:D2:AC:F8:CC:6B:D5:B5:4B:DF:56:4E:36:83:4B:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FB36BC72BD2ACF8CC6BD5B54BDF564E36834B9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/34352e3136342e3132382e302f32332d3233203d3e20323638363136.roa
Signing time:             Tue 07 Apr 2026 13:45:11 +0000
ROA not before:           Tue 07 Apr 2026 13:40:11 +0000
ROA not after:            Tue 06 Apr 2027 13:45:11 +0000
asID:                     268616
IP address blocks:        45.164.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/7FB36BC72BD2ACF8CC6BD5B54BDF564E36834B9B.crl
                          rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/7FB36BC72BD2ACF8CC6BD5B54BDF564E36834B9B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FB36BC72BD2ACF8CC6BD5B54BDF564E36834B9B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 04:12:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:2e:88:a7:48:1e:f5:f9:fd:9f:ff:c4:0a:b9:b4:80:55:1c:40:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FB36BC72BD2ACF8CC6BD5B54BDF564E36834B9B
        Validity
            Not Before: Apr  7 13:40:11 2026 GMT
            Not After : Apr  6 13:45:11 2027 GMT
        Subject: CN=B5E1F54AEC55C16AD6B8598D93888BBD1BEFBF6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:29:1f:a2:d1:c3:0e:4c:32:c2:4d:7b:96:69:
                    f7:fa:db:e6:08:d8:31:cb:80:84:d1:a5:be:02:a7:
                    10:7b:05:f4:83:95:65:a8:f5:aa:f9:ce:c5:70:ab:
                    56:c1:23:14:6b:19:66:33:37:0a:56:28:d1:b5:98:
                    83:78:0b:ab:15:cb:e2:62:8b:77:d1:30:6f:45:ce:
                    0d:03:b9:d0:b5:6a:05:d7:ce:e1:56:37:4d:54:45:
                    0c:cd:e5:68:ce:73:19:92:62:43:8c:6e:f9:25:0d:
                    0d:c9:70:8a:d7:3e:5a:80:1a:24:a4:03:08:d0:77:
                    bd:53:c2:d8:47:e8:aa:f1:b3:3e:e6:32:48:88:cb:
                    5a:58:35:9b:51:5b:3c:f6:13:48:37:3b:60:bc:2b:
                    e9:46:af:67:78:3d:c1:41:09:ea:8f:99:70:ec:65:
                    fd:ea:e6:98:1a:3a:74:07:fe:17:17:b9:34:5a:ba:
                    25:3a:0c:97:10:de:c2:17:61:a0:96:a8:3b:86:4a:
                    62:3a:41:91:dc:f1:48:b8:6d:de:08:a9:f7:ac:e5:
                    3a:90:05:59:cd:e9:fc:56:8d:ab:98:ed:37:24:03:
                    e0:0e:e0:ad:be:2d:6f:5a:0d:0e:7d:08:02:bf:84:
                    25:a2:71:d7:e1:ee:c1:f6:41:a4:68:24:45:e8:3f:
                    d1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E1:F5:4A:EC:55:C1:6A:D6:B8:59:8D:93:88:8B:BD:1B:EF:BF:6E
            X509v3 Authority Key Identifier:
                keyid:7F:B3:6B:C7:2B:D2:AC:F8:CC:6B:D5:B5:4B:DF:56:4E:36:83:4B:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/7FB36BC72BD2ACF8CC6BD5B54BDF564E36834B9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FB36BC72BD2ACF8CC6BD5B54BDF564E36834B9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/34352e3136342e3132382e302f32332d3233203d3e20323638363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:ac:a2:09:0c:06:bd:d9:73:5d:a5:fe:c0:a5:63:1a:e6:56:
         ae:14:a1:fc:97:25:16:34:26:0b:0b:18:ed:ae:69:18:3f:73:
         f7:f0:4c:f1:e5:59:40:eb:f5:58:2e:91:c5:ae:58:78:95:0c:
         6a:af:8e:b0:3e:53:5e:16:a6:9e:00:01:be:fe:87:a9:7a:71:
         57:d1:1b:e5:6f:2a:a4:ed:ec:ed:bf:47:f8:66:0b:36:3f:8c:
         f4:e4:22:89:7c:a7:90:b3:d5:f3:ed:04:c0:77:bf:2d:7b:67:
         5e:46:b8:e0:dc:86:3d:60:5f:b2:e0:6d:9d:1f:92:c3:4c:1e:
         0e:cb:fd:d8:92:ab:82:68:83:b7:d2:7d:80:cf:a2:f6:b7:c7:
         de:c4:ab:5e:97:d6:ee:0c:ba:b8:69:ee:87:e3:62:97:9c:90:
         72:da:de:36:c4:aa:33:d9:fe:35:c1:c1:75:77:6d:fe:89:1f:
         38:ee:f5:eb:03:c8:61:4a:64:fe:8a:f5:81:5a:80:dc:c4:44:
         8c:16:f0:a6:72:a4:14:34:13:0d:17:ee:ec:57:df:8e:cd:d7:
         90:26:b5:fc:a5:f0:82:56:cc:6e:4c:bf:55:84:f4:18:2a:28:
         df:8e:8b:09:92:a6:99:0a:3f:a0:70:1a:31:61:1b:77:b4:08:
         17:a1:30:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 19:11:54 2026 by rpki-client